CUI Sanitization and Destruction Requirements for CMMC
UPDATE 13-October-2025: NIST 800-88 revision 2 has been published. We’ve updated any references to NIST 800-88r1 in this post to the latest revision. Important revisions
UPDATE 13-October-2025: NIST 800-88 revision 2 has been published. We’ve updated any references to NIST 800-88r1 in this post to the latest revision. Important revisions
In continuation of our “What the heck?” series, we explore another NIST 800-171 control that has resulted in confusion for DoD contractors pursuing CMMC compliance.
It’s well-known that the road is long and challenging for Department of Defense (DoD) contractors pursuing a Cybersecurity Maturity Model Certification (CMMC), and especially so
Department of Defense (DoD) contractors that handle Controlled Unclassified Information (CUI) are required, under DFARS clause 252.204-7012, to implement the 110 cybersecurity safeguards outlined in
For Department of Defense (DoD) contractors and subcontractors pursuing compliance with the Cybersecurity Maturity Model Certification (CMMC), few controls have been as challenging (and costly)
Small businesses are the backbone of the United States economy, as they comprise upwards of 99% of all businesses. Given the sheer number of small
Totem Technologies is excited to announce that all software customers have been upgraded to the next major release of our Totem™ Cybersecurity Compliance Management tool,
What is Federal Contract Information (FCI)? If you have a contract to develop or deliver a product or service to the Federal Government, you undoubtedly

Most small business Department of Defense (DoD) contractors do not have the resources to hire a full-time IT staff, which is why we typically look